Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
File:                     UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json)
Hash identifier:          3eiofOsZlo/B7qMoTjV7e5YSYlexZvzQgr9tyMZeMpw=
Subject key identifier:   EA:5B:4F:73:CC:45:FC:93:A7:27:C4:9E:D6:FD:9D:19:C4:4C:C1:5D
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Certificate issuer:       /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
Manifest number:          01A6
Signing time:             Sat 13 Jun 2026 04:10:04 +0000
Manifest this update:     Sat 13 Jun 2026 04:10:04 +0000
Manifest next update:     Sat 20 Jun 2026 04:10:04 +0000
Files and hashes:         1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: nQuj08OJL/oqLzgE5fEMJtL7+Vse8TNQWjdQrC8bk/o=)
                          2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 3kP9Z+OOoAND6PAOU9ue/UcJJCzKrLb+i6LxI6B2qrY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
                          rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
        Validity
            Not Before: Jun 13 04:10:04 2026 GMT
            Not After : Jun 20 04:10:04 2026 GMT
        Subject: CN=6a2cd81c-6310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:70:d8:ec:18:74:26:82:b7:d1:82:e4:75:
                    e7:7d:db:d9:19:e5:ac:b0:5f:b0:9d:e7:89:a3:65:
                    bb:03:46:b3:0f:5e:c5:78:3e:f4:21:47:fa:e8:57:
                    fc:08:ba:61:64:3b:44:fc:44:b7:0f:bc:ee:05:e8:
                    1b:a5:ea:ba:e2:3e:4a:ba:0f:d6:68:43:7e:da:96:
                    35:8e:c8:b6:51:18:28:c9:c6:3a:2f:1e:35:5d:25:
                    6a:c0:18:49:b3:a7:bc:1e:b8:90:25:68:60:89:4b:
                    d7:e1:26:ee:13:51:6a:e4:75:89:44:43:10:7d:d7:
                    7b:94:11:a5:50:d3:e0:e7:34:d8:5e:50:70:34:16:
                    7a:f1:ea:19:3e:8f:fe:25:bb:59:7b:7b:4c:9a:06:
                    dd:86:4e:ab:78:75:39:c4:cb:22:f3:ab:e7:c0:22:
                    dd:fa:f1:c5:77:04:96:82:11:3d:1c:4a:f9:7c:3e:
                    b7:9c:53:f6:4e:54:e1:6a:d4:20:f8:c3:fa:e7:e0:
                    70:f8:2b:12:05:60:08:54:0f:95:0c:fb:50:06:10:
                    af:13:f8:20:a6:3b:97:0e:ee:8d:96:eb:3a:fd:c6:
                    1e:38:b5:5d:8f:30:28:d9:3d:a3:7a:61:c2:dc:20:
                    76:14:cd:c2:7c:55:81:b8:c2:9f:bc:51:e8:07:72:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5B:4F:73:CC:45:FC:93:A7:27:C4:9E:D6:FD:9D:19:C4:4C:C1:5D
            X509v3 Authority Key Identifier:
                keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:04:a8:d0:09:85:24:53:fb:26:fa:69:17:d7:94:c7:23:f0:
         5b:9c:7d:86:bf:fb:fb:dc:e8:53:37:60:88:5d:e5:33:d8:7c:
         a7:7c:f5:a4:de:3c:2f:0d:7a:5a:36:68:e7:c2:f7:31:c9:42:
         a9:a0:a8:83:79:0f:82:51:59:6a:c6:47:a2:a0:79:fd:ff:1c:
         67:73:ff:bd:e1:48:44:78:06:1c:06:cc:84:fc:cc:da:80:6c:
         2e:99:09:c3:1d:2a:62:50:ec:d4:23:43:3f:ba:53:fd:e2:d4:
         82:57:22:4d:7d:de:11:4a:42:5a:e6:5c:9b:15:d1:31:62:2f:
         ee:1e:79:d8:7c:a9:45:10:a8:19:1c:bf:0a:cc:e4:8b:63:67:
         e0:83:fd:c6:a7:b4:25:19:1f:ba:71:fc:fd:46:64:a9:a0:c9:
         8d:eb:b9:28:b7:e8:08:c7:20:84:cd:6c:a9:7d:0b:9e:f0:91:
         6e:e5:03:3a:8a:09:31:2d:c9:58:fb:d9:1f:ca:bf:ea:10:8d:
         a9:18:4d:7b:5b:4c:30:f4:48:db:3d:45:04:05:ec:78:52:fc:
         a6:5f:0b:99:53:fe:35:ac:3c:89:67:03:50:da:76:85:2a:37:
         12:bc:bc:f2:dc:64:be:9b:53:56:cb:01:9f:bd:7a:7f:72:e2:
         14:2f:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:35 2026 by rpki-client